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mmm 

o 

Ht*g4] fjN^3tcfe^T. 

B = XfcLT, A = A 2 mo d NtA = ABmo dN©JH^S:5C5{Cff^;V\ fr 
frSlg^UCfc^T Y<D±$Lfr% 1 bfy hfo*t, 0 -e&*U£_tSB A 2 mo 

dN0is^s&ti4f- # i: LTiaiKisHHcst y us 1 t*&*u£.li2 

A 2 modNilABmo d N ©SUMS* 3: ^J**-?- Z £ LTg3Hm{&&Clft V & 
t/%©T^«J, JtlSISraO (DH£<D A = ABmo d N<Z)^g&#^±|BJiSLg65 

±sa«asc«s*tt, _hsaYo#^hf-/ h e j ©igra 1 x&o K&^x-/f- mbi& 



1 



tfSfE# 2000-3111643 



#2 000 — 003295 

$*i53i:$:iftti:t^IC*-K 0 
U. 

Jtia^M^tt, _h!BY(Z)#^^^ h e j <Z>|&3glXtt0lC«i:oT>f- MII8& 
JtSafBttllJS&tt:, U- K^-f b;ty7 7i:my-F7^ hA7775:Il 

Kir-* #ffi}£<Z> 1/ 2;* # IZ&ffiZ *u Mm*?- # ^.hfH^ ^ - u z tc*& 

B = Xtlt, A = A 2 modN^A = ABmo d N©SI^5:$5^fi!&V\ 
J^SSIUCJCfeV^T Y<Z>_t&^e> 1 bfy bfo^t, |^SOl?$>tl«_LI3A 2 mo 

. l&SlT'&tUiiifBA 2 modNhABmo dNOim&f^r-^t 

LT^©m7j^>f $y?x*mnmmz%i*)&ti : b<DT*$>v. ±mA=A 2 mod 

NCD^^^ffi7J$tlT7b^±|HA = A Brno d NOiSaStfBM&StlS ^T*CD 
BSfc-LSE A = A 2 m o d N (Z)ffr# fci&fci^ U A = ABmodN ©|Ra¥|g**«ffi* 
£tlT^e> YcDtf y htf)^M^#t3S£-£#>T7£tf>l^y MC*fJ&LfcA 2 mod 
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±mm^^mm^m^.-y hit. Aij^tifcx. ymn^^ji a=i, 

B=Xi:L/t, A = A 2 modNi:A = ABmodNO!)SIi:ftifti{C)l!fLt 

> Mo-r^ti^iaA 2 mo &N<Dmm.ffi%:$:m%jt£'r-*£i,rmmmmz 
vTmw.ms&izmv v . ±mWimo(Dn^<DA=ABmo 

- Ko 

-g-fr^ ^ =l - )vm&<D T J 9 u n y \f. =r - # T? & o T . 

[§M13] 2&C;fcV^ 



ffiHE# 2000-3111643 



#2000—003295 

±m^p=L-jvmmt. 1 -D<D^mi^m^t±iz^xm^ti^z.t.iz^^x 
±m^mm^mmmt> q&mmmmfrbnmBz&vxmfttzm^m 

[1^15] ff^l 4 iCfcVNT, 

B=XtbT, A = A 2 mo dNi:A = ABmo d NOSI^^^Stfi 1 ^^, ^ 
J^£iil^lC;i3V^Ytf>J:&j^ 1 Ify hfo^T, #3 0 T fetlliJilBA 2 mo 

d N<DWiWffi%:zm%}&^- % t. x^xmrnmrnzm y i&s 1 x&tii,£±m 

A 2 modN£ABmo d N0if^Ufi4f- # H VXmmmmzMV & 
tii><DX*&V. ±mmmO<D£g(DA = ABmo d N (D^lft^^JlfBfiSL S W 
<D - gLSifr^ £ $ ti S d H £ £ -T £ v >f * n n > t° ^ - # „ 

B=Xtlt, A = A 2 modNi:A = ABmodN©II&jcS^K 
^SitlLlC;BV^Y©_tft;fre> l \Zy hto^t, t&SO^&tUiiilEA 2 mo 

. HSl "t?$>tl«±l2A 2 modNilABmo dN©II^&Wj:f-^ t 
bT-£©ffi;fr#-Y ^ >?*T*Smia{&&Clfcy&iffc<Z>7?&y, ±|SA = A 2 mod 
N(D^M^^m*$tlT^e > ±SHA = ABmo d NCSf^^Snt 
©|J9fcJ:iBA = A 2 modN©l^S:ill^ A = A B m o d N <Z>&Jtt££ltftt 
*$tlT^e>Y©tf^/ h<«3gf!!^&S£^&Tr£<Dbry MC*fJ&L£A 2 mo 
dN<Dm.Bi? i m%l2ftZ>lkX(Dm : b±mA = ABmo d N £ fc® 

Tfes r £ Zi&mE-t £ v>f * n zi y tf n - * . 

[M17] Sf^l 4 iCfc^T, 
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B=Xt Lt, A = A 2 mo dN£A = A B m o d N (DU^t^tl^tHZMLX 

, ^0-efemi-hlBA 2 mo dN©^>S£JII£^&^-#£LTfB^im8&tC 
I&S 1 Tf&tltfilfBA 2 modNtABmodN0iIM«M& 

d n ©MBi&f^ n , #isi#t©^i ^^--^t-^n-^m #_tia jisl Brno 

[0 0 0 1] 

z-ommiz. i c * - y tuny \±=L-*\zmv. #cica-^^ 

[0 0 0 2] 
[^©tfcffi] 

#i5:Mt5TA (Timing Attack ) ifc<D£ot£S^y ^> tf^tklzM$fi~t : £>i=. 
ra^^MM^^SI^SitSM^S^^f-rs^ODM^ IT, 0- 

[0 0 0 3] 

[#§w^^ b j: e> n •? z>wkm\ 

Tl^S., ZlCDZliltCO^Tki:, John Wiley & sons *± W.Rankl & W. Effing^T 
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Smart Card Handbook j ©8.5.1.1 Passive protective mechanisms( 263^— 

) izmm^tix^^o 

[0 0 0 4] 

O^y, SPA ( Simple Power Analysis) &Mft<fr<DM^. %>Z>^ 

gJ-aS^tflTV^-?-* Zffiffi U DP A (Diffrential Power Analysis) &7f& 

IE b utt© £ * tc tt«8Efc?g#:*: * ft H° - * . 
[0 0 0 5] 

BtffB^#lCfa*«j:e>lCTA (Timing Attack ) &©*&^J*LfcS]E*i3lT? 

•k'JfttBfimiBlft^&fiiW-rSilvO SPAXIj:DPA^0j:9«;A>^>y# 
$&Ktt2tire£ftv^ ^^T% *JK»iS#^K:fev^Ttt, JtKlCA-K&tf I 

© ^ o ^ 9 A iz <fc »; - ^ © -5 s - * gLSlfrf^ £ ff 5 *» © \z M V X JtfB © <fc -5 ft iE^ 
[0 0 0 6] 

£3 3©38i£©faIBfte>mc^©t3:fr©e ift£§T£ift# 

[0 0 0 7] 
[M Sr»«b-r S fc «) ©^S] 

*isic^v>T^$ns^©e)^f^^ft^©©«!£M$:®#cra-rti^ 

«ifctCJ:oT»^«m«««JI&Sti, fro. Hg#ft&«Xte^#{fc&3l£#o£: 
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[0 0 0 8] 
[0 0 0 9] 

ioi ©w^tc^«$tifc0^b^vA i >f<z>v-f ? nn>trn.-^^^e>^ 
- Kffl^^y©^^^c^$tlTv^s«f5t<D^ («£) 102^0. m 

WL&m&l 0 2&, ^02 (C<fcoTSi^i-.5cl;^^«^^VCC, fii9 
?I/0-l/IRQ;1- I /O- 2/1 RQsi-}i2tlZ> a ICA-Rt 

[0 0 10] 
[0 0 1 1 ] 

(J^T#JCC PUil^e>^-^*^S) 2 0 1, ROM (Read Only Memory) 206 
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RAM (Random Access Memory) 2 0 7, ^ff^fi^ ^ U 2 0 8 & fCDlHlt^S 

, m^m&'&^tmm(Dmm.zfite?^7u±yV2 o 9, Am^-h (1 

[0 0 12] 

0 2 S^bTMStlS^ii^ D 7 ^ C L K&f H ^^S^SP^n 

€>m&T*$>z> a cpu2oia, i&sit^^^w^if zft^mm-z&v. zs 

if^WtS. gB4*^2 0 6, 2 0 7. 2 0 8&. ^n^7A^f-^$:^i 
ZF^Dt>yt2 0 9lt ^M-TS <fc5lCR S Aflgf-^fc ^C/S 

tiSo 1/0 (Am*) 3K-h 2 0 2tt, z nmmzn vmmx'&z 

So 

[0 0 13] 

JtgBfBfll^g 2 0 6 , 207, 2 0 80^, ROM2 0 6tt, gHtip'g^J^ 

□ a^Ms^y oar, ram£v^) 2 o 7«effiics2iiM(Z)»^gi^.^"e 

, RAM2 0 7©rtgtt, 4»«rS*l<fc<3ifc«. 
[0 0 14] 

JhlB^SHStt;* =E y (^T, E E P ROM (Electrical Erasable Programmabl 
e Read Only Memory) h^o) 2 0 8 tt, BTffifc^fMBtt* ^ 

SPiC^StlSo 30EEPROM2O8tt, #£g|;L5*ft^#& l J , fro I C 
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PROM2 0 8VUW2ftZ> 0 
[0 0 15] 

CPU2 0 1il ^frty&^'C #u7nizyy-}imffi&ffif&fc£tlZ> 0 ^&t> 

7>f?n*4ROM, |gBiaS&. iHMW'^X^ (RG6*S0 „ ftgB/IX B U S IC 
*g^-r*/^ K9>f A, Axl/S/-Aa&if©Affi*ia»€:**o 0 CPU201li 
„ ROM2 0 6&£jC&^3*lTV>5i^£S^mu •Z<D4rfrlZ#J&'t&mft 
*ftZ)a CPU20 Hi, I /OjK- h 2 0 2 ^/rUTA^J^tl-S^aS^-^G) 
ROM2 o 6 frb<D&&^&&Mff<DfclbK&M£.1ii&mfe J r — 2 <D 
&5&'r-*<DWt&liiV, RAM 2 0 7^EE PROM 2 0 8 izM^^f- $ 69 

[0 0 16] 

JilBCPU 2 0 1 l±, ^ny^)«B»2 o 5^e>5§££*iss/;*^A?a >y 

ii^^oTi&f^^tiSo cpu2oi(t ^©wsiJ(Z)^ii§iJ^p^-v>*;i/MM 

OS FET^NftV^MMOS FETil*^«;5CMO S»f>M$tl 
4#K:ft!lPg£nfc^#, CPU2 0 1H CMOSX^f^>^7'J«^7D 

mm L X ft o <k o & C M O S #*>f ^ ^ y * m% £ £ „ 
[0 0 17] 

ffi.g.3L=.y h (nyat>^) 2 0 9 ?:rtlLTV^S, ya-& yi?- 2 0 9 
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[0 0 18] 

mo d N&J£V>-g>2>\ ^4x«^^I(Z)Montgomry^h \,\£>tiZ>$tMTJVzi V X-MC 
iotiMlA 2 modN^ABmod N <D 2 O(D^lC^0-T § d £ #T*£ £ 
o Y=e n e^j • - • e x ©iej £±&e n jb^gT&GDej^ £l? 

flS(C 1 tf y e j = 0 £ofc£>A 2 mo d N<E>*£, e j = 1 ;£ 

of^A 2 modNi:ABmodN^ItS. Lfetfot, e^OOii^JC 
&A 2 mo dN©^W©^lC i = 0-£&£#®WJ£««#ff£frtl, ej = 1 CD 
££IC&A 2 modNilABmo dNi:0SI©tf:i = 0 ^feS^CD^^S 

#f?&fc>*is£:«>ic, ej =0 1 1 £izMf&vfc2m*)<DnwLffi.m<Dj&-mtfmn 

[0 0 19] 

3©HJgM©ck^lcn^ , n-fe^iJ-2 o 9 £Mv^#-j§?ic&. ^©M^mSfc&C 

HSP A&K <fc *J «F-&« Y ©ffi ^^>^*lTli9 BTfgffi^lS fit- 
^^m^m#X Y mo dNOOSI^S:ff^e»lC^fcymSLS65©^^-©Mm^ 
^(Cej =0T*t)lt't)A 2 mo dN^ABmo & N (Dmi5<Dffi.W$:1glZfi&$ 
[0 0 2 0] 

03©#>f $>^®lCfeV\T. (a) JCa*"*.!^ e n =ltf>fc£lC 
&A 2 mod NGDH^C&fTVV e n CD^^CD 1 ICJ; tJB#|^t 1 SlTABmo d 
N V\ ^tf>*Hf£^lC i fcv^ U ;* > h (n-1) LT i = 0 &C 
HSt2»t„ 7*V^T% ^^^he^j = 0tf>£:£&, A 2 modN©^ 
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&ffV\ =0®WSi:il:f?U^>h (n-2) bt i = 0 <Z)fU^lC^ 

Hgt3£^>-t 0 f LT, ^If'y he n _ 2 = 1 © h A 2 modNOil 

fcffVK e n _ 2 ©Hf0 1}Cj:y^t l^ltABmodN0l|E^f!v\ ^ 
(DmW-mz i U*> h (n-3) LT i = 0 ©¥!j/£lcB#|g t 2 £3H>i- 0 

[0 0 2 1] 

Z<DmifcM<Da-7u-V-yy'2 0 9 iCfc^Tli, JlfBBif#^YOQ#tfy h e j © 
l^aiOXtt 1 lC4ffB8£UCA 2 mod NWlMlCABmo d N(Z>tf^L&fT& 5 
<fc^lC-TSo ®3 (b) = 0 (D£g<D£z>lZe { tfmMO <D tglZ&tf 

£_LiEABmo d N(Z>M3?#Ji&iBl$tf>#* * -M^h LT#A£*l£., o£*J, 

(b) 0)#-f ^ > ^0^:^04 07D -3^- h0<DJ:5&C, A 2 modN^A 
Brno dN&W.g.mVFOffllZiZ^ m^-ite i (Dmfe&WfeZ&ti^fflt l*** 
3*1, ABmodNi:^lf>yh {CM b fc A 2 m o d N 0tIi6^0|flC «, i 

gt-Sfct. ^(Z)^*^^»^CD^<Z)^#t3*l^V^fc«)®4©^^-^•V- h 
0T-&#B&£*ITV>£ O 
[0 0 2 2] 

mmx^t. mzmn^ rnmmm. m-misv^z-zruvt j:y*fiits*i, 

b T * ©3B«<»ff ififi & t> *v & 0 
[0 0 2 3] 

(R/W Buffer) £<DmiZ>f- h®8&l #t»itf&*lS 0 Z.(D>f- V ®g& 1 

J: *JM^f^f3&*)*lT, ej #HJl0fcibtfA 2 modNift^OtHW 

il^rtli/UMDB £ y - F^-r h;t>y77&^bt^ffii/^^CDAi: 



1 1 



£titE# 2000-3111643 



#2 000 — 003295 

Mf &-b*l5 A B m o d N©SU^*ttfcS&"5*-- # £ LT&fctlS ifct45„ 
[0 0 2 4 ] 

(Dmt&We&. l/S?7*^Dy^©U-K5>f h^*;77 (R/W Buffer)*: 

#MJH#PTOAXMDB £ V- F^>f hA*y77t^lT^(i!>l/^^CD 

WM^*^^X^CDAlcmy^*tl§il, ^(D^fC'f- h£g§DTb£V^j^ 
j^S l'^X#CDA^©§rfcfc^-#<2«^i&#£:£Slfc > r5o Lfe^ot, ^© 
^tCfffcfrtlSABmo dN(Z)|g#^tt, U - K^>f h A y 7 7 * X 

[0 0 2 5] 

7 (R/W Buffer) i:*$Mgi/5;;**JC^>f h*n-^##£ VTteTLh 
[0 0 2 6] 

$>^&«U#l*.<5J:"5JCl-& : fa©*e&S. ej = 0 0) £ £ IC A 2 

mo dN»f^©«Ht|g*««ttJ*snfe«K:9>f h>f *-:7;WM&ntf i/^/i/i: 
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[0 0 2 7] 

(DMffiMVlZ. Ui/X$Z?Uy?<DV- K9>f hA*;7 7 (R/W Buffer)*: 

^g-u^x^iKDraic-feU?* 2i:i^x#^ny?ic^-i/^;*# itfR»& 

^10&?,«A 2 mo dNi^IW^UMDB y - F^-f hAy 
77t $r^UTm^© l^X# C D AlC#£&£;fl.5 <fc "5 as#-5ft»«:JgJ«U 

[0 0 2 8] 

o*y, J:ffi«J¥*g*#l/^;**CDAfc#yjk3^&fc, -fcOtfeK:*^ - 1/ 
1 l^X#CDA^<a£Tfc£5=- ££SlLl, 

^ofCtlC^fctlSABmo dN JC»Sfc**l 

e; j^aftaii3Sfce>«-fei/^* 2ttfljtKii/^x*cDA&aiR'rs Q 

[0 0 2 9] 

©Sfi£®#^3*lTV^ 0 09 (a) £>#-f ^ y tfMjkXf (b) 07n-f^- 
F0lC;i3^T> t5«l/fcJ:^lC, A 2 modNCjim ej ©¥0)£<Z>B£O 
t 1 (Dfflbtni-mM-Wlftil LTA 2 mo dN»UABmo dN<Z>$H#tC 

[0 0 3 0] 

•tOSIJMftJCi &T9V*>h (-1) lTi=O0^CHf|t2$:fn 
f©nt±EABmodN0lI$:i^$t5„ J^T. e x *T*Hf«ft 



1 3 
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h gizmm* < ±ma> <t t> &mnMft*Mm-?2><DT«. mmmmx-^ t. % iz& 

[0 0 3 1] 
[0 0 3 2] 

hu~ -?m^<Dfcm * # ^ - << % - zrjim^T*mmmz&i£v g & £ e> fc •? 

{C3^a>f*-^f^^7^f-f ->f *- >OWg-if tfXSe 

[0 0 3 3] 

-LIB© J: e> tesEMm&1>mT ** ^ - -f * - 7^f>f^* 
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tefSWr - * £ L T M3c $ it tl S „ 
[0 0 3 4] 

ITA 2 modNtABmo d N(DWW1£ — ttt. LT??& ~D £z>iZ Ifei^tt 
[0 0 3 5] 

-#L3I ttm h -T £ ?t»lc*f b T ifr^fc i: £ £ Italic - A - ^ a -Ml £ # 
A-TSo #frtf_L&, ^X<DmUA 2 modNtABmodNOilf: 

[0 0 3 6] 

07D-ft- hH#^£*tT<^<5„ ^©^n-^-v- h0li. ttfgBHi l (b 
) lC*fJ&LTVv£„ A 2 modNi:ABmodN©#ilH 3&I^B3IS £ ^ - 

[0 0 3 7] 

2 modNtABmodNOio^n^nJimc^^Ttt, : £<D$lW1f£^ftJ& 

LT*-rt-yu-mm(D&&&<D£f&^&<D2mMtf&&i<fr-t)K z.<d&mm 

tCi:5*f^-£te, tulBA 2 mo &N tLABmo dN(D&?&Ziy°Uffi.niZi$\,\ 
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[0 0 3 8] 
[0 0 3 9] 

li^^ — Jt—A— ~7 u — ##lcj: o T?H#^^^" — A — 7 □ — #LJI$:?T&o T 

- hm$&<D¥- h SrBSD-Sr HlZ£^rM%}lZ-?Z>3b<DT*2bZ> 0 Lfe^ot, fu 

x hn-y##A^^^tiT, R/W;t^77Xlil/^X^7*n>y *©mj£<z> u 
# IC&SM^tfa^ & * tl & . 
[0 0 4 0] 

*-A--7u-Mmmmz£^Tm$iZftf~^4 hxhn-7*i^R/w;i7 



ajUE# 2000-3111643 



#2 000 — 003295 

So 

[0 0 4 1 ] 

Z>fc#>(D$>( $>!fmft*;2ftX^2> 0 (a) IC^f <fc 5 lC#5fm, e n = 1 (Z) 
fciSJCttA 2 mo d fx V\ e n ©fjjg© 1 iCj; »J B$fflt 1 ^ItAB 

mo dNCDSUf&frVV ^(DmW-WZi&TVV *>b (n-l) Lti=0© 
W3£JC«Fiat 2 feft-^-r. 7M^T\ ^CtTyhe^j =0 (Dilute* A 2 m o d N 
©SUTfefrV^ e^j =OCDflgi:iS:fi"J^>h (n-2) bTi = 0©^9 

^ic^rat 3 $&m&wbftK.MisT+ ±m>&mw&<Dmmt 1, t2 

[0 0 4 2] 

(b) ®^f>f5>^HT'll _tfla«SLBtt©4U — 9"-f ^;i/<Z)«fAtt> 
B£|^t 3 £>T LTA 2 mo d NXteABmo d N(Z>^ -3**17^ CD 

(b) mtmz±mWLm-4$<D'[ y&-A;uzis^Tmm&^>#Mz.mk-tZM 

§Lglft<Z>#^ — "9*>f #;i/#*fA£*x£o _tf3A 2 modNXttABmodNOV^ 
[0 04 3] 

o*»J, n^"D-fe>y-9-{C J:S^^mH^#©^lCfc^T, EI 1 5 (a) IC^ 



1 7 
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Ltmm&mnmco&mt i, t 2, t sizmsiuw&f^-w^tjvzmA 

U -^B^^lc#^v-^£©#J&*£Aft£o d^Ucj:*;, @15 (b) IC 
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